sso.unicredit.eu

- UniCredit S.p.A. -

Issued by Actalis Organization Validated Server CA G3

About this certificate

This digital certificate with serial number 44:91:7f:0f:b8:d3:b4:c1:b0:0c:b6:be:70:5d:cd:29 was issued on by Actalis S.p.A..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UniCredit S.p.A.

Organization: UniCredit S.p.A.
State / Province: Milano
Locality: Milano
Country: IT

Actalis S.p.A.

Organization: Actalis S.p.A.
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 44:91:7f:0f:b8:d3:b4:c1:b0:0c:b6:be:70:5d:cd:29
Serial Number (int): 91142963869505109593645124613618650409
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4a:41:4b:58:ce:52:fe:81:f8:d7:ae:53:a3:9f:ad:76:b7:c7:58:2a
AuthorityKeyId: 9f:8a:b1:b5:f1:b1:de:82:f4:27:7c:be:88:cd:de:a9:43:81:a3:4b

Fingerprint (sha1): e2:e1:bb:ef:c6:9e:d2:16:29:f1:e4:c7:43:95:c2:a4:cd:51:00:4c
Fingerprint (sha256): 0c:b7:21:32:e2:3c:74:c3:9b:0d:6d:be:e6:db:06:f4:ba:a5:76:0a:56:c4:65:d4:fd:b2:76:3b:6d:4d:5a:7c

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-authovg3

Revocation information

OCSP Server: http://ocsp09.actalis.it/VA/AUTHOV-G3
CRL Distribution Point: http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL

Check the revocation status for certificate sso.unicredit.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso.unicredit.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso.unicredit.eu

Other certificates including the domain name unicredit.eu

(limited to 100 certificates)
payfits.unicredit.eu
globaltrade.it.hypovereinsbank.de
ucremanutenzione.unicredit.eu
mx13.unicredit.eu
www.qc.research.unicredit.eu
mx19.unicredit.eu
resetvc.unicredit.eu
san-005.ceros.com
seguc.unicredit.eu
mx05.unicredit.eu
ebanking.it-v.unicreditgroup.de
authorization.internal.api.unicredit.eu
convene.unicredit.eu
nra.unicredit.eu
mobileqa5.unicredit.eu
ccnp-de.unicredit.eu
jobs.unicredit.eu
mx04.unicredit.eu
vidm.unicredit.eu
*.extranet.unicredit.eu
ensqa.unicredit.eu
resetmb.unicredit.eu
*.extranet.unicredit.eu
*.rasqa.unicredit.eu
mobira.unicredit.eu
authorization.api.unicredit.eu
ebanking.qc.unicreditgroup.de
mobileqa1.unicredit.eu
qnra.unicredit.eu
ilibrary.unicredit.eu
mx17.unicredit.eu
ra.internal.unicredit.eu
mx07.unicredit.eu
convene.unicredit.eu
mdm.unicredit.eu
api.payfx.unicredit.eu
san-005.ceros.com
www.research.unicreditgroup.eu
corporateportal.unicreditgroup.eu
www.unicreditgroup.eu
api.financial-institute-de.unicreditgroup.eu
mobileqa3.unicredit.eu
segdev.unicredit.eu
ensqa.unicredit.eu
sipedge.unicreditgroup.eu
globaltrade.it.hypovereinsbank.de
mobileqa5.unicredit.eu
be-part-of-it.unicredit.eu
mx07.unicredit.eu
www.unicreditgroup.eu
san-005.ceros.com
authorization.openbanking.unicredit.eu
mobileqa3.unicredit.eu
mx04.unicredit.eu
sso.unicredit.eu
mdmqa.unicredit.eu
uspg.unicredit.eu
nra.unicredit.eu
mx05.unicredit.eu
www.qc.research.unicreditgroup.eu
UCRECensimentoQA.unicredit.eu
processihrpe2.unicredit.eu
sipedge.unicreditgroup.eu
www.unicreditgroup.eu
authorization.api.unicredit.eu
tls10.unicredit.eu
*.extranet.unicredit.eu
ebanking.it.unicreditgroup.de
api-sandbox.unicredit.eu
san-005.ceros.com
developer.unicredit.eu
ens.unicredit.eu
UCREManutenzioneQA.unicredit.eu
feedback.unicredit.eu
globaltrade.it-v.unicredit.eu
hrprostaffm.unicredit.eu
ebanking.it.unicreditgroup.de
mobileAT.unicredit.eu
uspg.unicredit.eu
segat.unicredit.eu
san-005.ceros.com
mx17.unicredit.eu
sftpfgi.unicredit.eu
uagqa.unicredit.eu
lp-00.buddybankmessaging.unicredit.eu
segatqa.unicredit.eu
uctradefinancegate-1.unicredit.eu
segatqa.unicredit.eu
resetvb.unicredit.eu
a-apigw.omn.dev.azure.unicredit.eu
corporateportal.unicreditgroup.eu
san-005.ceros.com
esg-survey-eu-hvb.unicredit.eu
sipedge.unicreditgroup.eu
*.it.f4p.uat.g4c.unicredit.eu
vrra.unicredit.eu
iep-wifi-mi.unicredit.eu
compensationpolicy.unicredit.eu
www.research.unicredit.eu
www.unicreditgroup.eu

Certificate

The complete raw certificate details for sso.unicredit.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHujCCBaKgAwIBAgIQRJF/D7jTtMGwDLa+cF3NKTANBgkqhkiG9w0BAQsFADCB
iTELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xFzAVBgNVBAoMDkFjdGFsaXMgUy5wLkEuMTQwMgYDVQQDDCtB
Y3RhbGlzIE9yZ2FuaXphdGlvbiBWYWxpZGF0ZWQgU2VydmVyIENBIEczMB4XDTIz
MDMyMzE0MjIzNVoXDTI0MDMyMzE0MjIzNVowZTELMAkGA1UEBhMCSVQxDzANBgNV
BAgMBk1pbGFubzEPMA0GA1UEBwwGTWlsYW5vMRkwFwYDVQQKDBBVbmlDcmVkaXQg
Uy5wLkEuMRkwFwYDVQQDDBBzc28udW5pY3JlZGl0LmV1MIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAystAbxwgTYCXwMqUOFgYjNN2jf8kd5vnhUu+VVxA
+Eo8TYl9VP0KPcUbOndILXes+oyn4RtEiOE2OsYBFm8MgM14h3aXFan64ilKL3SY
zhDpn02EbFuS2UIhCdscCEwbH2e81vXmTjSr3C19SdDzTlPznbDBA8758a+2OSgn
8ocE75p4xjTaXmqHnmHZZeSoY8ZpEF2HvR4pxfzUYIjQOIath98UC7w506aPWjcU
8yD7aJbYYew05U06RErO7o8u2jEVtD2aXahOVC2ZtKpV27bOb8d6MXhihyrGfdNZ
zJ5QuSU2HhitfllKN6S4IgW76jJKknbQp1/DSYt6ioM5TwIDAQABo4IDPzCCAzsw
DAYDVR0TAQH/BAIwADAfBgNVHSMEGDAWgBSfirG18bHegvQnfL6Izd6pQ4GjSzB+
BggrBgEFBQcBAQRyMHAwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jYWNlcnQuYWN0YWxp
cy5pdC9jZXJ0cy9hY3RhbGlzLWF1dGhvdmczMDEGCCsGAQUFBzABhiVodHRwOi8v
b2NzcDA5LmFjdGFsaXMuaXQvVkEvQVVUSE9WLUczMBsGA1UdEQQUMBKCEHNzby51
bmljcmVkaXQuZXUwUQYDVR0gBEowSDA8BgYrgR8BFAEwMjAwBggrBgEFBQcCARYk
aHR0cHM6Ly93d3cuYWN0YWxpcy5pdC9hcmVhLWRvd25sb2FkMAgGBmeBDAECAjAd
BgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwSAYDVR0fBEEwPzA9oDugOYY3
aHR0cDovL2NybDA5LmFjdGFsaXMuaXQvUmVwb3NpdG9yeS9BVVRIT1YtRzMvZ2V0
TGFzdENSTDAdBgNVHQ4EFgQUSkFLWM5S/oH4165To5+tdrfHWCowDgYDVR0PAQH/
BAQDAgWgMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwBIsONr2qZHNA/lagL6
nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYcO4tluAAAEAwBIMEYCIQCMiiTz9KYn60dj
MFzAZbGF2COi8Qv/ymVTSJpkA1jAdwIhALyXmAvhKXDIGO3SpxIk7p9BHJOd/kE5
YaYF1tDOEyYLAHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGH
DuLZGAAABAMARzBFAiB+EnBbiBA6IVKXuYPhmrZt9RVBNrL9RBxgCiONbofOqAIh
AI1JDT7QcZ2Apjynd6pDCBRqODeDCMzJ+IOFOIyp3vDHAHcA7s3QZNXbGs7FXLed
tM0TojKHRny87N7DUUhZRnEftZsAAAGHDuLZSgAABAMASDBGAiEAzXlMcapLz472
90PldWDJdLR+uSudAvqYd1k/dQonyFACIQCMTMu8eybu4/CJntgtXhwCKVzNu+nC
y77xl9cv9IVg/zANBgkqhkiG9w0BAQsFAAOCAgEAnsnesUbYcV2CJN90Jtvr88Z2
BYD0E6DLTLc2YXj6aTmo3B6MWpVD2dBVIcClWw5B2/uWkQEWvr1JuDaOHAb3RQ6d
kNVcBCDDdct/6f/+laB4hZniCqVJKUkqwkGYdXmgGI+q9RcsOam82JJWXPpb4foM
KXCAdubPV41PkaiyqmS30Aly8Pwj8BCE5/y0Bd8VpUPymKTvPGnLB7ZcGyPCtWvA
/l5hctKoLjWhp4h+LlJQJDPdAYt/+7HAo5HNFWobf9RQKpVYguKRXFB10PR+ZNbD
qVxWBghbv2LBu1ghHIdVLI7pjH/m4R1Gv/do6MIj8oJOXgZY9EYdLKxe29FJaYHq
qoC+afbmp6qZSeWn7cuSIJ7ol/w/tgwIsyfG6l1ATuVdWa3d33jxYIECTzEp+cnb
rD9SuHLv8+m+a52uOvmg2wDyHgXG5UoUuIbcL8ivqyvSRfBdiLbW4XXD5cll5FYO
GHb2a15KaQ9YxmN1eqA5yLNnLVZtfD3iO5sS0NF4ncfHb7yb5MH1soalT6/ot9WV
N/lly40sz41tB+OomhB5vDAWdxxuQC8u30o8d70KU1PwClnxCLmyZpTx2H+WD7b5
KLo2aPblvO8gOR+D4n9bV1KFENDd47QD5Hr98fmlh4BMlgxxOHA71yRvuMgPpGww
7VP1TApppE7cZ3NxWSU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAystAbxwgTYCXwMqUOFgY
jNN2jf8kd5vnhUu+VVxA+Eo8TYl9VP0KPcUbOndILXes+oyn4RtEiOE2OsYBFm8M
gM14h3aXFan64ilKL3SYzhDpn02EbFuS2UIhCdscCEwbH2e81vXmTjSr3C19SdDz
TlPznbDBA8758a+2OSgn8ocE75p4xjTaXmqHnmHZZeSoY8ZpEF2HvR4pxfzUYIjQ
OIath98UC7w506aPWjcU8yD7aJbYYew05U06RErO7o8u2jEVtD2aXahOVC2ZtKpV
27bOb8d6MXhihyrGfdNZzJ5QuSU2HhitfllKN6S4IgW76jJKknbQp1/DSYt6ioM5
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 91142963869505109593645124613618650409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Organization Validated Server CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-23 14:22:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 14:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Milano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniCredit S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sso.unicredit.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25600364749663493297447708917088770874280553391048273096280890318962108772900057961225220225760723858076238796346865968273406130752842654036617753510146437959358052541100762498195799662112516908947840311053987988815645826585620073131564432372120205651314557537939632621280006356642643859858051759771831233099778254167663421848315399921025275090215554875389954609661965417430762309325773179201287113116808076385031648198979290766847327184001132610360316292159063002099718417767781920082413082290265927555607712357475187913980070235926676336806542592445000139851001626044426836378801787113534020753650882956760774293839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9f8ab1b5f1b1de82f4277cbe88cddea94381a34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-authovg3'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp09.actalis.it/VA/AUTHOV-G3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.unicredit.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.20.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl09.actalis.it/Repository/AUTHOV-G3/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a414b58ce52fe81f8d7ae53a39fad76b7c7582a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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